Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/VNw8205zgqcsxDx8DssKyxJ_Gm8.roa
File: VNw8205zgqcsxDx8DssKyxJ_Gm8.roa (raw, json)
Hash identifier: onGjCH5MTTCmNABzkUzCYNGE5La3bQEkwo6cvlWLyCk=
Subject key identifier: 54:DC:3C:DB:4E:73:82:A7:2C:C4:3C:7C:0E:CB:0A:CB:12:7F:1A:6F
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 0199E16BBBDB91347DE587763B74AEF41F24
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/VNw8205zgqcsxDx8DssKyxJ_Gm8.roa
Signing time: Tue 14 Oct 2025 06:32:37 +0000
ROA not before: Tue 14 Oct 2025 06:32:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 91.217.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:6b:bb:db:91:34:7d:e5:87:76:3b:74:ae:f4:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Oct 14 06:32:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54dc3cdb4e7382a72cc43c7c0ecb0acb127f1a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:03:d9:35:b1:bd:32:43:46:ea:91:75:75:
b5:9b:17:b5:e7:64:82:6e:34:8f:82:50:a7:a6:43:
61:52:ec:59:7c:a1:ce:8d:51:49:fc:4b:e7:95:86:
ef:83:0e:fc:25:a5:92:a7:80:0d:bc:0e:f0:13:9e:
4c:55:d4:49:3a:af:76:45:ca:f2:49:19:63:01:f8:
64:8b:95:42:67:57:f5:23:38:75:d8:08:c8:51:24:
a4:99:12:75:04:4f:10:0e:ff:59:52:31:c3:a2:f9:
1e:0b:c6:e5:13:95:03:a6:51:db:11:de:3e:47:22:
fb:e2:f6:46:f6:8c:c8:df:6f:31:2d:31:f5:95:02:
9c:a8:5d:26:3d:f8:c6:72:e1:97:ae:3d:63:c9:a6:
1f:6f:fa:13:4f:10:b6:31:cf:1c:d5:6a:2a:c4:84:
29:d9:a9:d3:71:1a:2c:10:1c:72:38:ef:6c:de:97:
e6:a2:09:7c:c5:8f:c4:36:3c:01:b6:be:bb:a0:e3:
24:76:aa:f8:cc:e4:55:04:06:77:ec:82:fd:b2:67:
2a:e5:18:5b:00:46:1b:31:d9:c0:29:40:f8:f6:f8:
99:2c:bd:6e:12:57:db:d0:79:e7:00:a2:95:a3:32:
e5:f1:19:71:53:bc:b2:4a:2b:fd:53:84:14:c6:fb:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:3C:DB:4E:73:82:A7:2C:C4:3C:7C:0E:CB:0A:CB:12:7F:1A:6F
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/VNw8205zgqcsxDx8DssKyxJ_Gm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4f:d6:f8:b2:45:e0:33:02:1b:e5:ba:b0:6a:ea:b7:f2:08:
f5:90:3b:87:3a:bc:21:90:bc:6c:92:e7:de:69:07:8f:59:e4:
19:6a:3d:4d:22:22:62:78:d0:c9:10:51:74:46:7a:82:80:e4:
ea:f1:a4:21:81:3d:23:f3:df:8e:b1:c0:16:0b:0f:36:15:50:
3e:83:77:da:2f:18:20:4f:00:a3:5c:fb:97:d8:c9:64:9a:ba:
0f:92:f3:e8:83:f5:94:4b:b2:d1:62:0b:b3:46:85:b4:7f:68:
c0:29:55:00:4c:74:6f:42:d1:f1:83:73:99:30:20:dc:c7:8a:
6a:05:f4:03:b7:75:51:2c:94:1a:47:f9:ef:76:02:c9:5b:40:
a5:38:53:12:17:5a:b3:82:5e:33:b3:67:54:0a:3d:f8:96:4f:
66:90:0d:34:d3:d2:0f:11:8d:7c:5a:e3:0d:71:3e:c2:8f:a2:
41:a1:3b:b6:a9:51:fd:ca:af:2b:e4:04:1d:c5:ad:1d:6e:0b:
dc:f2:35:59:f2:ca:9e:39:6b:ec:19:10:8d:ba:c8:5d:3e:30:
14:dc:77:f8:1d:ac:13:a5:db:e5:3b:b3:77:90:25:b2:dc:6c:
fc:06:cd:01:f2:6c:aa:50:86:b3:0c:54:99:f0:ac:b3:67:31:
8c:d9:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:35 2025 by rpki-client